common

Documentation

Index

• func NewGrpcConnection(ctx context.Context, apiEndpoint string, apiEndpointID string, ...) (*grpc.ClientConn, error)
• type AdaptInputFunc
• type IamToken
  • func NewIamToken(ctx context.Context, apiEndpoint string, authorizedKey *iamkey.Key, ...) (*IamToken, error)
• type NewIamTokenFunc
• type NewSecretGetterFunc
• type NewSecretSetterFunc
• type PerRPCCredentials
  • func (t PerRPCCredentials) GetRequestMetadata(_ context.Context, _ ...string) (map[string]string, error)
  • func (PerRPCCredentials) RequireTransportSecurity() bool
• type SecretGetter
• type SecretSetter
• type SecretsClientInput
• type YandexCloudProvider
  • func InitYandexCloudProvider(logger logr.Logger, clock clock2.Clock, adaptInputFunc AdaptInputFunc, ...) *YandexCloudProvider
  • func (p *YandexCloudProvider) Capabilities() esv1beta1.SecretStoreCapabilities
  • func (p *YandexCloudProvider) CleanUpIamTokenMap()
  • func (p *YandexCloudProvider) IsIamTokenCached(authorizedKey *iamkey.Key) bool
  • func (p *YandexCloudProvider) NewClient(ctx context.Context, store esv1beta1.GenericStore, kube kclient.Client, ...) (esv1beta1.SecretsClient, error)
  • func (p *YandexCloudProvider) ValidateStore(store esv1beta1.GenericStore) (admission.Warnings, error)

Functions

func NewGrpcConnection

func NewGrpcConnection(
	ctx context.Context,
	apiEndpoint string,
	apiEndpointID string,
	authorizedKey *iamkey.Key,
	caCertificate []byte,
) (*grpc.ClientConn, error)

Creates a connection to the given Yandex.Cloud API endpoint.

Types

type AdaptInputFunc

type AdaptInputFunc func(store esv1beta1.GenericStore) (*SecretsClientInput, error)

type IamToken

type IamToken struct {
	Token     string
	ExpiresAt time.Time
}

func NewIamToken

func NewIamToken(ctx context.Context, apiEndpoint string, authorizedKey *iamkey.Key, caCertificate []byte) (*IamToken, error)

Exchanges the given authorized key to an IAM token.

type NewIamTokenFunc

type NewIamTokenFunc func(ctx context.Context, apiEndpoint string, authorizedKey *iamkey.Key, caCertificate []byte) (*IamToken, error)

type NewSecretGetterFunc

type NewSecretGetterFunc func(ctx context.Context, apiEndpoint string, authorizedKey *iamkey.Key, caCertificate []byte) (SecretGetter, error)

type NewSecretSetterFunc

type NewSecretSetterFunc func()

type PerRPCCredentials

type PerRPCCredentials struct {
	IamToken string
}

func (PerRPCCredentials) GetRequestMetadata

func (t PerRPCCredentials) GetRequestMetadata(_ context.Context, _ ...string) (map[string]string, error)

func (PerRPCCredentials) RequireTransportSecurity

func (PerRPCCredentials) RequireTransportSecurity() bool

type SecretGetter

type SecretGetter interface {
	GetSecret(ctx context.Context, iamToken, resourceID, versionID, property string) ([]byte, error)
	GetSecretMap(ctx context.Context, iamToken, resourceID, versionID string) (map[string][]byte, error)
}

Adapts the secrets received from a remote Yandex.Cloud service for the format expected by v1beta1.SecretsClient.

type SecretSetter

type SecretSetter interface {
	SetSecret() error
}

type SecretsClientInput

type SecretsClientInput struct {
	APIEndpoint   string
	AuthorizedKey esmeta.SecretKeySelector
	CACertificate *esmeta.SecretKeySelector
}

type YandexCloudProvider

type YandexCloudProvider struct {
	// contains filtered or unexported fields
}

Implementation of v1beta1.Provider.

func InitYandexCloudProvider

func InitYandexCloudProvider(
	logger logr.Logger,
	clock clock2.Clock,
	adaptInputFunc AdaptInputFunc,
	newSecretGetterFunc NewSecretGetterFunc,
	newIamTokenFunc NewIamTokenFunc,
	iamTokenCleanupDelay time.Duration,
) *YandexCloudProvider

func (*YandexCloudProvider) Capabilities

func (p *YandexCloudProvider) Capabilities() esv1beta1.SecretStoreCapabilities

func (*YandexCloudProvider) CleanUpIamTokenMap

func (p *YandexCloudProvider) CleanUpIamTokenMap()

func (*YandexCloudProvider) IsIamTokenCached

func (p *YandexCloudProvider) IsIamTokenCached(authorizedKey *iamkey.Key) bool

Used for testing.

func (*YandexCloudProvider) NewClient

func (p *YandexCloudProvider) NewClient(ctx context.Context, store esv1beta1.GenericStore, kube kclient.Client, namespace string) (esv1beta1.SecretsClient, error)

NewClient constructs a Yandex.Cloud Provider.

func (*YandexCloudProvider) ValidateStore

func (p *YandexCloudProvider) ValidateStore(store esv1beta1.GenericStore) (admission.Warnings, error)